Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31727

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Commit ec35c1969650 ("usb: gadget: f_ncm: Fix net_device lifecycle with device_move") reparents the gadget device to /sys/devices/virtual during unbind, clearing the gadget pointer. If the userspace tool queries on the surviving interface during this detached window, this leads to a NULL pointer dereference. Unable to handle kernel NULL pointer dereference Call t
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5b3131853f9fa5567c9d8ebd75a15ac674ecb18dd07c2db97a7d2a01d8e6c505
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f9f987472f4b8ab177be2b6492a59278ed969479","status":"affected","version":"7c97366f5dac5255e60a317ffe3a5b18f3745547","versionType":"git"},{"lessThan":"7fce959e9be3bf63bb0fdf4b05f9cc42cb289fe2","status":"affected","version":"36c41e9724c9a7a7cda37f5a4e9d94f25c8031c4","versionType":"git"},{"lessThan":"0326429e8ba99892e1d1e115dc8e88e1a3b64e24","status":"affected","version":"93f116c3…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6.12.81","status":"affected","version":"6.12.78","versionType":"semver"},{"lessThan":"6.18.22","status":"affected","version":"6.18.19","versionType":"semver"},{"lessThan":"6.19.12","status":"affected","version":"6.19.9","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f9f987472f4b8ab177be2b6492a59278ed969479","status":"affected","version":"7c97366f5dac5255e60a317ffe3a5b18f3745547","versionType":"git"},{"lessThan":"7fce959e9be3bf63bb0fdf4b05f9cc42cb289fe2","status":"affected","version":"36c41e9724c9a7a7cda37f5a4e9d94f25c8031c4","versionType":"git"},{"lessThan":"0326429e8ba99892e1d1e115dc8e88e1a3b64e24","status":"affected","version":"93f116c3…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6.12.81","status":"affected","version":"6.12.78","versionType":"semver"},{"lessThan":"6.18.22","status":"affected","version":"6.18.19","versionType":"semver"},{"lessThan":"6.19.12","status":"affected","version":"6.19.9","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/0326429e8ba99892e1d1e115dc8e88e1a3b64e24"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7de4d46be40738c7e48e64b5cc0a34aa1e047b0a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7fce959e9be3bf63bb0fdf4b05f9cc42cb289fe2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/a36e5e800b9c93e3e1ffa42f34d38b36775dbcee"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e002e92e88e12457373ed096b18716d97e7bbb20"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/f9f987472f4b8ab177be2b6492a59278ed969479"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d70b62b74da9d802d891d7b2b36dfa5b910f15a9d69b1dd34bb83a97dc6edf8 · sha256:0fa9502723370d07… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer